
"Microsoft Message Analyzer (MMA) was retired and its download packages removed from sites on November 25 2019. There is currently no Microsoft replacement for Microsoft Message Analyzer in development at this time. For similar functionality, please consider using a 3rd party network protocol analyzer tool such as Wireshark."įortunately, Microsoft offered an immediate solution 😃, which is an open source tool called etl2pcapng you'll find at GitHub, here.

etl file was Microsoft Message Analyzer, but it's not supported and download link is not published anymore 🙁. Now, the issue is that Microsoft no longer provides a tool to read the produced. Make sure the destination path exists before you start the capture (i.e.: c:\temp).persistent=yes: means the capture will go on even if you reboot the machine.It's better to run the previous commands with privileged rights.Netsh trace start persistent=yes capture=yes tracefile=c:\temp\mycapture.etl The commands are netsh trace start and netsh trace stop: #To start packet capture: Thankfully, there is a native Windows command that let's you do the same functionality with no extra tool on that Windows machine. In my personal experience, that's a common scenario. However, you might encounter a case where you cannot (for some reason 🙄) deploy any extra software (i.e. Of course, Wireshark is the first option you'll think of as an alternative.


If used to use any of these two Microsoft product Network Monitor (NetMon) or Message Analyzer, you'll need to start finding a replacement as both products are no longer supported.
